A tailored course, built for your situation
Direct handoff of SLSA framework decisions from senior security leads
Become the named owner of critical supply chain security outcomes with documented authority
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior technical practitioner influencing security framework adoption without formal mandate
Who this is not for
Junior admins learning Jira basics, product marketers, or executives seeking board-level summaries
What you walk away with
- Own SLSA implementation decisions with peer-recognized authority
- Deliver audit-ready packages for third-party reviewers without rework
- Produce version-controlled SLSA implementation playbooks used across teams
- Receive direct escalations from security architects on SLSA gap remediation
- Build cross-functional influence by resolving SLSA integration blockers
The 12 modules (with all 144 chapters)
Module 1. Foundations of SLSA in enterprise toolchains
Understand how SLSA integrates with CI/CD environments common in Atlassian-supported workflows. Learn to map current tooling to SLSA Levels 0, 3 with precision.
12 chapters in this module
- What SLSA solves in practice
- Key components: Attestations, Provenance, Transparency
- SLSA vs SBOM: distinct roles
- Mapping SLSA to build integrity
- Common anti-patterns in rollout
- Role of artifact signing
- Integration with public registries
- Verifiable build pipelines
- Chain of custody design
- SLSA and regulatory alignment
- Toolchain gaps in Level 2
- Common ownership models
Module 2. SLSA Level 1 attainment playbook
Build a repeatable process for achieving SLSA Level 1 using existing Jira and build tool data. Focus on source integrity and basic provenance.
12 chapters in this module
- Source repository controls
- Branch protection standards
- Pull request enforcement
- Build trigger validation
- Human vs automated merges
- Version tagging policy
- Artifact naming conventions
- Log retention for audit
- Initial provenance metadata
- SLSA Level 1 checklist
- Cross-team signoff workflow
- Documentation for reviewers
Module 3. SLSA Level 2 achievement with automated builds
Advance to SLSA Level 2 by hardening build infrastructure and generating verifiable provenance. Use Jira project data to justify process maturity.
12 chapters in this module
- Dedicated build environments
- Immutable build outputs
- Reproducible builds overview
- Build platform isolation
- Service account governance
- Signed provenance generation
- Provenance schema structure
- Linking builds to issues
- Automated policy checks
- Provenance attestation format
- Time window validation
- Peer review of build config
Module 4. SLSA Level 3 readiness with two-party builds
Design for SLSA Level 3 using independent validation and hardened infrastructure. Leverage existing Jira workflows to demonstrate control maturity.
12 chapters in this module
- Two-party build requirement
- Independent builder setup
- Separation of duties
- Build parameter controls
- Buildkit vs Tekton comparison
- Provenance signing keys
- Key rotation schedule
- Timestamp authority use
- Transparency log integration
- Monitoring for drift
- Incident response linkage
- Audit trail completeness
Module 5. Generating and validating SLSA attestations
Master the creation and review of SLSA attestations using real-world templates. Ensure compliance with evolving security review expectations.
12 chapters in this module
- Attestation schema breakdown
- Provenance vs attestation
- Signing key management
- Sigstore overview
- Cosign and Rekor integration
- Verification script templates
- Automated attestation checks
- Attestation storage model
- Versioning attestations
- Human-readable summaries
- Third-party validation paths
- Error handling in verification
Module 6. Integrating SLSA with third-party audit cycles
Align SLSA outputs with auditor expectations. Create self-documenting packages that reduce follow-up questions and speed approvals.
12 chapters in this module
- Auditor information needs
- Packaging SLSA evidence
- Timeline of attestations
- Chain of custody narrative
- Common auditor questions
- Gaps in Level 2 audits
- Remediation tracking system
- Evidence retention policy
- Cross-team coordination
- Review cycle timelines
- Stakeholder communication
- Feedback loop from auditors
Module 7. SLSA governance across distributed teams
Lead SLSA adoption without central authority. Use Jira project patterns to show consistency and maturity across teams.
12 chapters in this module
- Identifying SLSA champions
- Standardizing build configs
- Templatized onboarding
- Metrics for compliance
- Peer audit process
- Escalation path design
- Conflict resolution models
- Documentation standards
- Change advisory boards
- Toolchain exception process
- Training delivery plan
- Feedback from developers
Module 8. SLSA and vendor risk management
Extend SLSA principles to third-party software vendors. Develop review checklists and integration standards.
12 chapters in this module
- Vendor attestation requirements
- Third-party SLSA levels
- Integration with procurement
- Risk scoring model
- Onboarding assessment
- Evidence exchange protocol
- Third-party toolchain audit
- Escalation process for gaps
- Contractual language
- Compliance tracking
- Remediation deadlines
- Termination triggers
Module 9. SLSA integration with SBOM generation
Combine SLSA provenance with comprehensive SBOMs. Deliver coherent software supply chain documentation.
12 chapters in this module
- SLSA and SBOM overlap
- Timing of SBOM creation
- SBOM format standards
- Linking SBOM to provenance
- CycloneDX integration
- SPDX compatibility
- Vulnerability linkage
- Automated SBOM updates
- Human review process
- SBOM distribution controls
- Retention and access
- Customer disclosure policy
Module 10. Incident response using SLSA artifacts
Leverage SLSA data during security incidents. Speed containment and root cause analysis with verifiable build records.
12 chapters in this module
- Triggering SLSA review
- Attestation chain analysis
- Provenance timeline mapping
- Build environment snapshot
- Identifying compromised stages
- Scope of impact assessment
- Rollback decision framework
- Communication to stakeholders
- Regulatory reporting
- Post-mortem integration
- Process improvement tracking
- Lessons from real incidents
Module 11. SLSA policy drafting for internal standards
Write clear, enforceable SLSA policies. Align with existing security frameworks and leadership expectations.
12 chapters in this module
- Policy scope definition
- Applicability statements
- Exemption process
- Enforcement mechanisms
- Compliance measurement
- Audit readiness criteria
- Version control for policy
- Stakeholder review cycle
- Communication plan
- Training integration
- Review and update schedule
- Policy exception tracking
Module 12. SLSA roadmap planning and stakeholder alignment
Build a credible SLSA rollout plan. Gain buy-in from security, engineering, and product leadership.
12 chapters in this module
- Assessing current state
- Setting maturity targets
- Resource planning
- Tooling investment cases
- Milestone definition
- Success metrics
- Leadership communication
- Progress reporting
- Feedback integration
- Adjusting timelines
- Cross-org coordination
- Celebrating milestones
How this maps to your situation
- After a new security mandate requiring SLSA
- During third-party audit preparation
- When onboarding a high-risk vendor
- Before rolling out a new build system
Before vs. after
Before
SLSA discussions happen upstream, with little visibility into decisions or documentation
After
SLSA framework decisions are handed directly to you with clear ownership and expectations
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per week over 12 weeks, with on-demand access to all materials.
How this compares to the alternatives
Unlike generic security certifications or broad compliance courses, this program focuses specifically on SLSA implementation in real-world engineering environments, with templates and workflows tailored to practitioners influencing without authority.
Frequently asked
Is this course about Jira or Atlassian tools?
No. It focuses on SLSA framework implementation in environments that may use Jira, but the content is applicable to any engineering organization securing software supply chains.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me lead SLSA adoption without formal authority?
Yes. The course teaches influence patterns, documentation standards, and peer validation techniques used by practitioners who lead change without mandate.
$199 one-time. Approximately 3 hours per week over 12 weeks, with on-demand access to all materials..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours